CVE-2026-57617

6th percentile — higher than 6% of all known CVEs

The SeedProd Pro plugin versions prior to 6.19.5 contain a Cross Site Scripting (XSS) vulnerability in the contributor function. It allows an attacker to inject malicious JavaScript code into pages generated by the plugin.

An attacker can exploit this vulnerability to steal user sessions, redirect them to malicious sites, or perform other actions in their context, potentially leading to data confidentiality and integrity breaches.

Immediately update the SeedProd Pro plugin to version 6.19.5 or later, which fixes this vulnerability.